The Company Administrator attempts to change the default password reset method for users in their company from the default method "Send e-mail to users to confirm identity" to the option "Display Challenge questions to users to confirm identity". Changing the option appears to work for the administrator and the option is confirmed (see example below) however the default Email method to confirm identity is still utilized for all users that need to reset their password.
1. Select Administration from the top menu.
2. Select System Settings/Security from the left navigation.
3. Select Edit Settings.
4. Select the option for " Display Challenge questions to users to confirm identity " under Password Reset Method section .
5) Select Save Changes .The display challenge questions option is confirmed and displayed as the Password Reset method.
6. When any of the company users attempts to reset their password, the Email method to confirm identity is still utilized however and the Challenge Question option is ignored.
When the Challenge Question option is turned on, users will see a new section titled "Security Questions" in their My Account Settings. The section is not functional and can not be edited. They will also see a warning at the top of the My Account Settings page, "There is a problem with displaying Security Questions. Please try again later.". The Security Question section and warning will be removed when the administrator changes the Password Reset Method back to Email.
The option to set the password reset method to utilize challenge questions can not be turned on at the current time. This is a known issue that is under investigation. The default method of requiring email identity for user password resets will function correctly and allow for user password resets. The challenge question option, if selected will be ignored.